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Adopting a programming-language perspective, we study the problem of implementing 
authentication in a distributed system. We define a process calculus with constructs for 
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We describe a theory of authentication and a system that implements it. Our theory is based 
on the notion of principal and a "speaks for" relation between principals. A simple principal 
either has a name or is a communication channel; a compound principal can express an 
adopted role or delegated authority. The theory shows how to reason about a principal's 
authority by deducing the other principals that it can speak for; authenticating a channel is 
one important application. We ... 
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